Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/ph8moqukjiOG0TYPeB9-VLKyqGU.roa
File: ph8moqukjiOG0TYPeB9-VLKyqGU.roa (raw, json)
Hash identifier: zP7BUlgus/BstmRTSFb5J6C5mq2FsICAqXUKXM/4KoQ=
Subject key identifier: A6:1F:26:A2:AB:A4:8E:23:86:D1:36:0F:78:1F:7E:54:B2:B2:A8:65
Certificate issuer: /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial: 0185700B90BC37E7E0A2927CE96B4257D814
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/ph8moqukjiOG0TYPeB9-VLKyqGU.roa
Signing time: Mon 02 Jan 2023 01:14:44 +0000
ROA not before: Mon 02 Jan 2023 01:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43430
IP address blocks: 193.46.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:90:bc:37:e7:e0:a2:92:7c:e9:6b:42:57:d8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
Validity
Not Before: Jan 2 01:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a61f26a2aba48e2386d1360f781f7e54b2b2a865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:ce:43:12:a3:6c:17:90:c5:7c:d9:3b:b3:
a8:30:6d:99:ce:e9:47:20:27:f5:42:ba:e5:7d:78:
c8:a9:4c:0c:1e:ee:31:fe:bd:76:c4:3f:a3:8a:b2:
26:ee:a0:4f:7e:8e:81:07:5f:90:c7:5c:ac:80:16:
36:92:c0:88:06:a2:c1:c7:3e:81:ca:19:a7:94:fc:
61:cb:11:b7:ba:1d:ed:f9:a0:08:29:ea:7d:23:97:
ba:f1:b9:e9:7f:f5:ac:a7:02:39:6d:91:aa:2d:fb:
a9:f3:86:4b:a7:ff:02:6c:b9:e7:c8:49:29:e0:a9:
d6:03:28:b1:4e:09:be:f7:91:74:58:d3:29:c2:9a:
f6:09:3d:d1:0b:34:7b:e0:ea:2f:84:35:f6:1e:c9:
50:c7:ca:25:7d:77:7a:48:33:90:aa:4e:54:04:4f:
8d:4a:ab:fb:22:e8:e3:e3:84:20:d0:0c:5b:2a:17:
9a:b4:07:0a:4b:be:84:89:16:68:cc:df:61:33:5c:
08:af:b0:55:31:0e:b2:7a:bc:2a:b2:fb:0f:fc:a2:
06:4a:f6:f8:7a:f5:83:56:49:b9:1e:bf:a5:8a:cf:
28:79:ed:f9:6e:20:da:a3:fa:d1:ca:95:88:05:db:
bd:da:51:7c:48:b2:f3:09:4a:e9:cd:f5:5f:b0:fe:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1F:26:A2:AB:A4:8E:23:86:D1:36:0F:78:1F:7E:54:B2:B2:A8:65
X509v3 Authority Key Identifier:
keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/ph8moqukjiOG0TYPeB9-VLKyqGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.71.0/24
Signature Algorithm: sha256WithRSAEncryption
50:11:87:15:4c:26:3e:8c:1f:2d:a5:b3:ae:70:9a:4f:b6:8d:
bf:92:0c:6e:4a:1c:9f:29:15:20:59:73:da:c0:90:0c:f6:1f:
51:71:0f:62:b9:6b:84:fe:ce:72:6c:66:6c:ab:69:a7:e6:43:
7c:37:39:90:fb:e6:9e:53:82:c6:ac:65:31:28:2d:b3:ab:ae:
7d:7d:4f:b9:ce:a3:45:a6:f3:60:ea:68:06:59:ea:68:f4:e5:
75:eb:3b:23:d6:3e:98:48:d0:5c:ca:6e:c9:10:b3:43:62:b4:
cb:ca:25:ea:7f:30:73:bc:ef:17:cd:1b:0b:30:19:1b:09:d5:
54:6e:52:8b:56:cc:54:9f:5e:24:fc:d1:32:7d:ea:8e:a7:ba:
1b:e3:b2:01:c1:d4:cc:b4:f7:96:14:b6:dc:a8:6a:52:07:d8:
96:a6:81:a5:26:7e:9a:16:ed:b4:3b:9f:9c:3f:9b:ed:8d:ca:
69:54:30:ed:37:97:27:35:50:ae:f1:18:cb:14:96:55:ad:a5:
ea:cd:e5:66:f2:1d:c3:8b:85:b5:22:b9:81:ce:b5:4a:99:60:
fa:6e:8e:47:2a:bd:38:2a:7f:18:2c:16:81:c4:a4:4a:30:32:
5b:46:69:ac:a0:84:ae:62:c2:96:a6:00:5a:22:eb:aa:44:78:
d4:70:07:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:06 2025 by rpki-client